Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa
File:                     2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (raw, json)
Hash identifier:          fWSj9dAgYw9nG3wqv+J+lqVoRiH88B3Y/i3ikVgewC4=
Subject key identifier:   50:43:85:36:F6:20:4C:26:7A:0C:DE:88:85:CD:94:20:2D:DC:13:C7
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       36C0
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:45:38 +0000
ROA not before:           Tue 02 Sep 2025 15:01:25 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     23033
IP address blocks:        2403:cc00:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 14:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14016 (0x36c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Sep  2 15:01:25 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48952-0434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6f:4a:20:f0:21:75:2f:6c:85:90:9a:24:9d:
                    b5:c3:30:fd:88:66:60:d8:d0:34:0d:7d:17:e7:90:
                    9e:0c:d3:45:82:36:d7:90:83:fe:1d:3b:e5:79:89:
                    0d:7e:d5:51:1a:c0:f4:cd:93:e4:22:81:c2:f2:62:
                    23:81:ec:44:0f:d6:3c:2d:01:5b:71:d0:22:25:58:
                    b4:df:53:aa:dd:cc:60:d2:79:ba:e2:92:fb:90:73:
                    34:5d:cc:ed:99:bd:3a:f8:f6:12:85:a8:aa:8e:d5:
                    6c:ea:8a:98:70:aa:d4:e0:43:c1:24:b4:36:aa:be:
                    c7:2c:ad:af:e3:bc:06:3b:64:45:43:e9:85:d6:fa:
                    4b:36:d7:a3:aa:a4:af:a1:32:db:67:a3:8b:7d:ff:
                    8f:a4:e2:84:2e:e9:ad:1a:7d:09:aa:37:18:33:8a:
                    34:74:70:f5:6f:e1:47:f7:42:43:3d:85:b1:f2:a5:
                    4e:99:93:07:b9:6a:9f:57:eb:5a:9e:56:9c:5b:47:
                    a5:d0:d1:e7:8a:c7:94:08:d7:50:bb:e0:8d:50:1c:
                    7d:08:f1:6c:ef:bb:b0:df:9b:f7:35:e6:7b:05:67:
                    d6:8b:b2:af:72:d9:56:26:e5:8a:ee:b8:51:5c:66:
                    db:ae:5e:15:f6:24:1c:6c:b6:06:a6:c6:5c:ca:01:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:43:85:36:F6:20:4C:26:7A:0C:DE:88:85:CD:94:20:2D:DC:13:C7
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:cc00:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:c9:4e:86:1e:b2:5f:6f:95:b2:a7:ca:c4:b2:23:d7:af:
         e2:da:82:47:d8:cb:01:2c:1f:99:12:27:33:df:e1:e3:f9:88:
         dd:3c:c7:09:37:36:e3:aa:b5:6e:75:e4:f4:f1:fc:4f:ac:b8:
         a4:0a:bd:97:0d:3b:0b:89:64:e9:bf:1e:34:ab:57:b1:2f:5b:
         9f:0c:e6:2e:23:64:bb:f5:73:36:cf:91:5c:aa:bd:fd:f6:62:
         a0:ad:9b:07:96:f7:d3:aa:2a:2b:88:09:4c:c4:bd:25:7e:fe:
         13:24:87:ef:d1:d6:5e:d9:f4:02:c3:4e:d2:de:02:16:3e:66:
         b6:58:de:8d:a2:cc:ac:4c:48:9b:b2:99:7d:ad:84:90:a9:94:
         96:7e:3c:ec:44:55:e3:28:e2:2e:79:10:ff:d9:3a:05:3a:fb:
         2e:bd:af:26:46:7d:b8:d4:d2:0f:6c:54:fe:57:5d:5b:cc:d5:
         fb:88:0f:f0:9a:d4:37:fe:d6:75:2a:11:ca:83:3d:2b:0f:7f:
         27:29:61:98:13:7a:7d:72:88:a2:34:7e:d5:7a:fa:8d:30:a8:
         b0:4b:cb:8c:6c:fa:53:64:ab:66:7b:d3:62:e4:86:07:cc:94:
         0e:93:25:73:a6:d0:69:77:07:89:65:fe:9c:51:bf:98:24:91:
         33:a2:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:26:29 2026 by rpki-client